$ rpki-client -vvf rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft File: qzsSgRukXmOSsAXTQfk6DQfyqxw.mft (raw, json) Hash identifier: BaOJRQZQ926wQnLhrTdHw8aKALBd9BoOm4gHucyhvxY= Subject key identifier: 43:1A:72:7B:55:A5:B3:50:FF:85:3E:46:64:3C:D1:4B:85:E7:33:A9 Authority key identifier: AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C Certificate issuer: /CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft Manifest number: E1 Signing time: Sat 01 Jun 2024 07:18:42 +0000 Manifest this update: Sat 01 Jun 2024 07:18:42 +0000 Manifest next update: Sat 08 Jun 2024 07:18:42 +0000 Files and hashes: 1: qzsSgRukXmOSsAXTQfk6DQfyqxw.crl (hash: ZCZPoWGWO4h0FruXsx9lBJemhrOKK2/VsNnbL6Ft5Cs=) 2: 8C3C1C7EC94D11EDA5EF4839C4F9AE02.roa (hash: JSIERUiirVbPFJ8aqP2AfVoC0pzJHMwyydsQwNTDNkQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Jun 2024 07:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918557B/serialNumber=AB3B12811BA45E6392B005D341F93A0D07F2AB1C Validity Not Before: Jun 1 07:18:42 2024 GMT Not After : Jun 8 07:18:42 2024 GMT Subject: CN=665acb52-437e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c3:bb:d9:90:a5:92:ec:f8:b4:5c:04:ed:80: e0:16:b2:cf:51:7f:48:5d:0c:ac:db:99:1a:9d:8a: 4c:64:8a:d5:7f:a2:96:91:c8:f8:37:50:06:1c:ea: 27:38:50:30:f3:0c:1a:63:63:74:be:06:b5:5a:ce: 1d:3c:f1:52:05:a2:04:77:23:21:0a:f1:88:6e:08: e5:7a:92:1c:10:da:c5:2e:7e:ee:c5:b4:71:b8:8a: 1d:a7:c5:f4:59:41:54:49:03:76:c9:16:af:bc:93: 56:02:82:f2:39:f5:51:ba:cc:08:e8:45:c9:39:6c: 26:45:55:d1:db:65:52:33:39:7d:f9:52:e2:f8:30: 5b:6b:1a:7f:e0:30:59:bc:ab:c7:ca:1a:77:16:8b: 22:9e:1c:9e:bc:65:05:3d:49:b4:c2:e9:29:cc:49: ff:21:78:0d:93:34:ad:ff:2f:7b:47:df:14:78:bc: 9f:b6:a8:a7:79:e4:8e:89:fa:7a:31:e6:9c:a2:b4: 22:14:26:9f:7d:24:63:ea:fa:99:ff:38:0d:47:1c: d5:cb:10:58:1b:ea:86:98:45:4a:e9:45:6f:99:07: 99:8c:e6:03:cb:3b:08:d2:23:b2:06:36:13:0f:a4: 74:e3:45:09:b3:44:28:d3:36:3d:8f:e5:36:64:dc: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1A:72:7B:55:A5:B3:50:FF:85:3E:46:64:3C:D1:4B:85:E7:33:A9 X509v3 Authority Key Identifier: keyid:AB:3B:12:81:1B:A4:5E:63:92:B0:05:D3:41:F9:3A:0D:07:F2:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qzsSgRukXmOSsAXTQfk6DQfyqxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918557B/DB4ED606C94A11ED93016D38C4F9AE02/qzsSgRukXmOSsAXTQfk6DQfyqxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:14:b5:85:a2:e4:d4:17:8f:66:14:d6:1b:50:e5:01:73:b4: 26:73:fe:a4:35:45:f6:11:01:19:61:87:94:44:8e:be:a3:87: 52:65:be:09:98:d6:94:c5:98:36:f5:f8:1d:64:0a:2f:11:72: ed:f7:7c:de:2b:34:48:a1:20:65:93:49:8f:e1:a5:57:da:75: bc:6b:e0:ac:14:7b:23:e7:ad:bb:31:dc:18:8c:e6:cc:36:65: 5f:5b:4c:5b:87:5c:ff:48:51:1f:c2:21:f5:c6:25:5b:bf:75: 23:ee:6a:9a:3a:a6:26:db:9a:ce:54:b1:5a:18:ee:9b:82:8c: 35:c4:fd:a3:7c:da:10:c3:84:82:25:9c:6d:c3:04:e6:2e:23: 42:ac:8d:d7:93:e6:f8:62:2a:8b:74:d0:f6:85:5a:57:b7:4c: 0d:c9:11:a8:e1:00:12:41:df:72:39:f0:2b:26:81:72:2c:51: 29:4d:ff:3d:24:68:d1:a3:5c:34:53:91:10:6d:30:55:aa:2f: 0f:6a:ec:48:c5:8a:23:56:f8:22:bb:8e:45:c0:39:a9:a9:b2: fb:37:59:4b:bb:6b:29:a2:19:01:6c:bf:96:a0:8c:d7:14:6a: 70:7e:f9:43:ca:c3:07:91:09:5f:15:05:10:dd:4a:9e:e3:77: 33:77:09:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU1N0IxMTAvBgNVBAUTKEFCM0IxMjgxMUJBNDVFNjM5MkIwMDVEMzQxRjkzQTBE MDdGMkFCMUMwHhcNMjQwNjAxMDcxODQyWhcNMjQwNjA4MDcxODQyWjAYMRYwFAYD VQQDEw02NjVhY2I1Mi00MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysO72ZClkuz4tFwE7YDgFrLPUX9IXQys25kanYpMZIrVf6KWkcj4N1AGHOon OFAw8wwaY2N0vga1Ws4dPPFSBaIEdyMhCvGIbgjlepIcENrFLn7uxbRxuIodp8X0 WUFUSQN2yRavvJNWAoLyOfVRuswI6EXJOWwmRVXR22VSMzl9+VLi+DBbaxp/4DBZ vKvHyhp3FosinhyevGUFPUm0wukpzEn/IXgNkzSt/y97R98UeLyftqineeSOifp6 MeacorQiFCaffSRj6vqZ/zgNRxzVyxBYG+qGmEVK6UVvmQeZjOYDyzsI0iOyBjYT D6R040UJs0Qo0zY9j+U2ZNwSbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEMacntV pbNQ/4U+RmQ80UuF5zOpMB8GA1UdIwQYMBaAFKs7EoEbpF5jkrAF00H5Og0H8qsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTU3Qi9EQjRFRDYwNkM5 NEExMUVEOTMwMTZEMzhDNEY5QUUwMi9xenNTZ1J1a1htT1NzQVhUUWZrNkRRZnlx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3F6c1NnUnVrWG1PU3NBWFRRZms2RFFmeXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTU3Qi9EQjRFRDYwNkM5NEExMUVEOTMwMTZEMzhDNEY5QUUwMi9xenNTZ1J1a1ht T1NzQVhUUWZrNkRRZnlxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdFLWFouTUF49mFNYbUOUBc7Qmc/6kNUX2EQEZYYeURI6+o4dSZb4J mNaUxZg29fgdZAovEXLt93zeKzRIoSBlk0mP4aVX2nW8a+CsFHsj5627MdwYjObM NmVfW0xbh1z/SFEfwiH1xiVbv3Uj7mqaOqYm25rOVLFaGO6bgow1xP2jfNoQw4SC JZxtwwTmLiNCrI3Xk+b4YiqLdND2hVpXt0wNyRGo4QASQd9yOfArJoFyLFEpTf89 JGjRo1w0U5EQbTBVqi8PauxIxYojVvgiu45FwDmpqbL7N1lLu2spohkBbL+WoIzX FGpwfvlDysMHkQlfFQUQ3Uqe43czdwmA -----END CERTIFICATE-----Generated at Sat Jun 1 08:15:59 2024 by rpki-client on console-ams.rpki-client.org